gap analysis

Briartech Consulting is a Washington, DC–based IT and cybersecurity consulting firm focused on governance, risk, and compliance. It helps organizations align with standards such as ISO 27001 and NIST 800-171, strengthen security posture, support audit readiness, and enable secure, resilient operations across commercial and public sector environments.

audit readinesscontrols mappingcorrective action plansdue diligenceevidence collectioninternal auditsISO 27001 alignmentNIST 800-171 alignmentpolicy developmentproposal inputquestionnairesremediation planningreportingrisk assessmentsrisk scoringsecurity assessmentsSSP supportsubcontract supportvendor reviews

BSGI is a small, growing, Woman-Owned business specializing in Information Technology Management and Business Improvement consulting. Since 1997, it has provided enterprise IT services and solutions, including project management, acquisition support, business process optimization, independent quality assurance, cultural change management, data management, and organizational transformation. Its main office is located near Washington, DC and Baltimore, MD.

acquisition supportBusiness Process Modeling (BPMN, MSVisio, IBM Rational, Sparx, erwin)Business Process OptimizationCultural Change Managementdata managementIndependent Quality Assuranceorganizational transformationprocurement managementproject managementRequirements elicitation and documentationRFP developmentTesting (risk-based, business acceptance, 508 compliance, performance, security)

BuzzChalk is a certified women-owned digital learning company that creates custom training programs. Launched in 2020, it helps large and small companies transform their content into performance-based learning experiences, with expertise in training for FEMA, Homeland Security, Complex Coordinated Terrorist Attacks, corporate and state agency HR and onboarding, and end-user software simulations.

curriculum developmenteLearning developmentInstructional Designonline and instructor-led course developmentsoftware simulations

BVG & Company is a veteran-owned consulting firm specializing in Counter WMD (CWMD) and CP defense strategies. Founded by Mike Greene and Ed Britt, both retired U.S. Navy veterans, the firm offers strategic collaboration, alignment and operational planning, threat response solutions, problem definition and solution development, and focused R&D. It serves government agencies including DOE, DoD, DOJ, industry, and academia.

capability assessmentfocused R&DOperational Planningproblem definition and solution developmentstrategic-planningtabletop exercisesthreat responseworkshops

Capacity Building International, LLC (CBI) is a small business consultancy based in Austin, Texas, specializing in resilience, crisis management, and institutional capacity building for United States Government agencies and allied partners. CBI plans, launches, and executes programs that strengthen whole-of-government resilience, civil-military coordination, and national preparedness, working from rapid assessment through program design, exercise development, and delivery. Its accredited training arm, Crisis Lab, delivers NATO-aligned professional educat

civil society engagementdoctrine alignmentimplementation planningpolicy and planning supportprogram and project managementresilience and institutional capacity assessmentstabletop exercisestraining and professional educationworkshop and exercise delivery

Capstone Security is an independent information security consulting firm founded in 2000. For more than twenty-five years it has helped clients protect critical data, harden applications, maintain compliance, and reduce overall risk, serving federal agencies and enterprises across industries including healthcare, financial services, retail, energy, technology, and hospitality. Every engagement is senior-led, with no products sold and no vendor commissions.

CI/CD pipeline securitycloud architectureCloud migrationcontainer & Kubernetes securitycontrol reviewsincident response supportinfrastructure as code securitypenetration testingpolicy developmentrisk assessmentsecrets managementsecure code reviewsecurity awareness trainingsocial engineeringSystems Integrationthreat modelingVulnerability assessmentwireless security assessment

CDS Advanced Quality Solutions is a quality management consulting firm headquartered in Fort Worth, Texas, serving the Dallas-Fort Worth aerospace corridor and clients nationwide. The company provides ISO and AS standards consulting, including AS9100/AS9120 audit readiness, gap analyses, QMS development, implementation and training, and post-certification support. Its team consists of certified lead auditors with experience inside commercial and defense OEMs and prime defense contractors.

APQP developmentaudit readinessFAI/PPAPinternal auditor trainingLean Manufacturing trainingmock stage 1/2 assessmentsMSA facilitationPFMEA facilitationQMS developmentsource inspectionsupplier quality management

Chax Training and Consulting is a digital accessibility company formed in 2024 by the merger of Chad Chelius and Dax Castro's accessibility training and remediation expertise with Tamman's technology and web accessibility leadership. It provides accessibility training, consulting, audits, and document remediation, and has trained over 15,000 students in accessibility.

accessibility consultingaccessibility trainingcoachingdocument remediationform remediationPDF remediationsource file templatingweb auditsweb remediation

CISEVE is a Cyber AB Accredited C3PAO specializing in cybersecurity compliance and risk management services within the Department of War (DoW) supply chain. The company is one of the first CMMC C3PAOs and has over 50 years of combined experience. CISEVE is headquartered in Las Vegas, Nevada, with an additional office in Burlington, Massachusetts.

certification preparationCMMC assessmentsdocument reviewFISMA assessmentICS assessmentsISO consultingmock assessmentspenetration testingvulnerability scanning

Civasure is a disaster readiness intelligence platform that combines anonymous population survey data with federal risk indices (FEMA National Risk Index, CDC Social Vulnerability Index, Census ACS) to help emergency managers identify preparedness gaps and run targeted readiness campaigns. It offers a mobile app for anonymous surveys, gap analysis, geographic scoping at ZIP, county, and regional levels, push notifications, and campaign impact tracking.

anonymous surveysdata integration with FEMA NRI, CDC SVI, Census ACSgeographic scopingPush Notificationsreadiness campaigns

Class 1 Air is a founder and employee-owned, certified minority business enterprise with 20 years of company history, serving as a single source for air filtration products and critical environment compliance testing. It works with healthcare facilities, laboratories, and controlled cleanroom environments across the upper Midwest, with offices in Milwaukee, Madison, and Chicago. Technicians are NSF49 and CETA CNBT-RCCP-SCF accredited.

airflow measurementbiosafety cabinet certificationcleanroom consultingcleanroom testing and certificationcompressed air quality testingduct cleaningfilter service and maintenancefume hood testingHEPA filter integrity testingIQ-OQ-PQ validationisolator testinglaminar flow testingmicrobiological laboratory services

Clydesdale is a full service Management Systems Consulting firm that assists clients in the assessment, development, and implementation of Management Systems. For more than 20 years it has helped companies of all sizes across a wide range of industries and standards with management systems and ISO registration.

auditor traininginternal auditingISO registrationmanagement systems consultingprocess analysis

COACT is a Service Disabled Veteran Owned Small Business founded in 1990 that provides cybersecurity and compliance services for government and commercial clients. It is accredited as a FedRAMP 3PAO and GovRAMP 3PAO and operates an ISO 9001:2015 quality system. Services include compliance support for FISMA, FedRAMP, GovRAMP, LADMF, NIST SP 800-171, and CMMC, along with penetration testing, software development, and operational support.

ACAB assessments for LADMFcontinuous monitoringDocumentation developmentFedRAMP 3PAO assessmentsGovRAMP 3PAO assessmentspenetration testingRed Teamingrisk assessmentsecurity engineering and control implementationsocial engineering testingsoftware developmentSystem Administrationvulnerability assessments

Coalfire Federal provides public sector and private companies with cybersecurity expertise, specializing in CMMC advisory and assessment services as an authorized C3PAO, and FedRAMP and FISMA ATO services as a 3PAO. Formed in 2017 to manage federal government cybersecurity services inherited through Veris Group, it has provided cybersecurity services for nearly 20 years.

C3PAO assessmentsCMMC assessmentsCUI boundary analysiscyber automation, engineering, and orchestrationcyber program management and operationsDoD Impact Level 6 assessmentsFedRAMP 3PAO assessmentsFISMA ATOmock assessmentspenetration testingremediation supportrisk management and compliancesecurity compliance and advisoryvulnerability assessments

Compliance Insight is an FDA regulatory and quality compliance consulting firm serving the life sciences industry. It helps businesses overseen by the FDA navigate the regulatory process, achieve compliance, and develop best practices for manufacturing drugs, medical devices, and biologics. Its specialists each offer at least 15 years of industry experience, and the firm has assisted hundreds of clients across North America and globally.

auditsCAPA plan developmentelectronic publishingFDA 483 / Warning Letter responseFDA compliance consultingFDA submissionsGCP servicesGMP servicesinspection preparationmock inspectionsproject managementquality systemsregulatory affairs trainingregulatory strategiesroot cause analysisStaff augmentationvirtual quality assurance

ComplyRim is an AWS-native compliance automation platform that helps companies achieve and maintain compliance with frameworks such as SOC 2, ISO 27001, HIPAA, PCI DSS, NIST, FedRAMP, GDPR, and CCPA. It offers AI-powered scanning, automated evidence collection, real-time gap analysis, vendor risk management, and AI cost tracking, sold on AWS Marketplace. ComplyRim also provides expert-led compliance services including risk assessment, penetration testing, business continuity planning, and AI governance.

AI cost trackingAI model and LLM trainingautomated evidence collectionAWS compliance scanningbusiness continuity planningISO 42001 and NIST AI RMF governancepenetration testingvendor risk management

Composite Manufacturing Consulting Group, LLC (CMCG) is a team of Lean Manufacturing Experts offering New Product Development, Lean Operational and Project Management support to U.S. companies looking to keep manufacturing in the U.S. Their professional services aim to help companies' bottom lines through lean manufacturing, described as the relentless elimination of waste.

Internal audit preparationLean manufacturing consultingLean visual factory assessmentnew product developmentprocess engineeringproject managementSupply Chain ManagementTotal productive maintenance training

Conservation Collaborations is a woman-owned conservation consulting group founded in 2022 and located in the Rocky Mountain West. It works collaboratively with partners and stakeholders to find solutions to conservation challenges, offering rapid response training, program analysis and document development, and conference/event planning and facilitation.

after-action reportingbest management guidance documentsconference/event planning and facilitationevent planningexercise implementationlogistic and agenda developmentresource management plans

Cordill Solutions LLC offers business consulting services to companies in need of transformation through ideation, strategic planning, implementation and operational efforts. It provides an experienced, dedicated Leader to drive transformation efforts and operationalize them with existing staff on a short-term basis.

Business continuity assessmentschange managementcost optimizationMerger & acquisition supportProcess ImprovementsProgram & Project Managementstrategic-planningWaterfall-to-Agile transformation

Core Human Factors is a human factors and usability engineering consulting firm for medical devices and combination products. It provides usability research, instructions for use (IFU) development, IRB services, and participant recruiting, supporting regulatory submissions such as 510(k), De Novo, PMA, NDA, ANDA, and BLA. Offices are located in Pennsylvania, California, Texas, and Israel.

comparative analysisEthnographic Researchexpert human factors consultingformative usability testinghuman factors validation testingIFU developmentinternational usability researchIRB Serviceslabeling comprehension studiesparticipant recruitingpost-market evaluationprototype testingself-selection studiessummative testingtask and use-related risk analysisusability researchuser analysis and use specification development

Craigmile is a leading medical equipment supplier and hospital lift device distributor in New York State, offering patient handling products and SPHM equipment. The company provides Safe Patient Handling & Mobility (SPHM) program implementation and management, pressure injury prevention and management, SPHM risk assessments, consulting and program development, and safe patient handling training. It is a Woman Owned Small Business (CAGE# 89H29) and an ASPHP Certified provider at Associate, Clinical and Professional levels, as well as a California Board of

development of patient handling policieson-site trainingpressure injury prevention and managementsafe patient handling trainingSPHM consulting and program developmentSPHM program implementation and managementSPHM program re-assessment and cost-benefit analysisSPHM risk assessmentstrend analysis

Curry's Haven LLP is a multidisciplinary federal contracting and professional services firm delivering integrated education, human services, and cybersecurity solutions for government, healthcare, and community environments. Rooted in a legacy as an advocacy-driven provider for individuals with intellectual and developmental disabilities, it supports agencies, districts, and prime contractors nationwide with compliance-aligned, outcomes-focused solutions.

audit-ready documentationcase managementcounselingcrisis stabilizationcybersecurity and compliance serviceseducation program designleadership developmentmedia productionprogram assessmentresidential IDD careworkforce development

CVC Health Care, LLC provides education to health care professionals on insertion, care and maintenance of Vascular Access Devices. The team partners with facilities to build vascular access teams and programs across the US, offering accredited classes and a program to reduce hospital acquired infections and complications.

care and maintenance traininginfection reduction programsPICC/midline insertion trainingpolicy developmentUS-guided PIV insertion trainingvascular access education

Cyber Pack Ventures, Inc. (CPVI) provides technical and managerial consulting services to industry and government in disciplines associated with national security, with emphasis on intelligence systems and information assurance. Founded in 2006 by a former government senior executive, CPVI is a Columbia and Maryland based Small Business employing fully-cleared Subject Matter Experts in Information Assurance, SIGINT, and cybersecurity.

COOP planningcryptanalysis and cryptographycyber operations supportdata loss preventionhigh-performance computingidentity and access managementKey managementresearchRisk Analysissecurity assessment and authorizationsoftware assurancesoftware engineeringtechnical assessmentsThreat assessmenttraining and educationvulnerability analysis